This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/m1mZNmGn3cQt2RJZqOQ6x8zlSxQ.roa File: m1mZNmGn3cQt2RJZqOQ6x8zlSxQ.roa (raw, json) Hash identifier: QoWaAUlMFh1lhiMZuHSFJG4B7Vf6yI8ZyqsNOBMC67Q= Subject key identifier: 9B:59:99:36:61:A7:DD:C4:2D:D9:12:59:A8:E4:3A:C7:CC:E5:4B:14 Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B7E3894F46D1C865BB94069E07388C5AB Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/m1mZNmGn3cQt2RJZqOQ6x8zlSxQ.roa Signing time: Fri 02 Jan 2026 10:19:55 +0000 ROA not before: Fri 02 Jan 2026 10:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40123 IP address blocks: 83.126.16.0/23 maxlen: 24 83.126.17.0/24 maxlen: 24 83.126.22.0/24 maxlen: 24 83.126.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:94:f4:6d:1c:86:5b:b9:40:69:e0:73:88:c5:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jan 2 10:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b59993661a7ddc42dd91259a8e43ac7cce54b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:66:a8:ed:e5:dc:3c:e8:0d:43:04:6f:a6:ee: ba:3a:bc:51:2c:94:a3:c4:44:e5:f7:4a:2e:ae:32: 3f:a4:02:4a:a5:17:92:78:73:99:05:2a:33:b6:d3: 0c:2d:bf:10:bd:2d:28:ed:b4:04:6f:5a:66:0b:e3: b6:5b:c8:e8:c7:92:b8:c9:fd:c7:42:df:25:5e:ed: e0:06:40:57:53:d5:09:5f:b5:f8:53:59:3c:05:53: f0:c6:60:a4:dc:be:73:4f:ad:df:f4:3f:54:23:62: e4:cc:d3:9f:f2:9c:3c:9a:01:50:4f:f3:96:93:92: 14:db:05:4c:9b:a8:77:76:52:1c:c9:9d:27:8f:e0: 06:18:3c:8b:34:80:68:6f:52:0c:2f:81:53:12:ab: e7:f8:d4:f1:d6:86:c7:43:12:c6:03:0c:91:fa:ad: db:cc:ec:1f:32:3e:31:4f:41:31:4c:8e:3a:36:1d: 4a:53:19:32:30:f1:06:b6:f9:69:5a:9f:00:49:49: b4:4d:10:e7:e7:a2:d3:af:f1:54:91:5c:31:36:07: c2:7d:c7:b7:ea:78:5b:35:84:ad:6f:2f:4e:c3:e8: a3:a4:5d:be:53:89:b2:b8:cd:b9:2a:14:9d:b2:eb: b6:e2:13:a7:94:b4:07:78:08:f4:e7:d0:57:a6:52: ec:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:59:99:36:61:A7:DD:C4:2D:D9:12:59:A8:E4:3A:C7:CC:E5:4B:14 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/m1mZNmGn3cQt2RJZqOQ6x8zlSxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.126.16.0/23 83.126.22.0/24 83.126.56.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:49:c4:bf:c1:f1:43:7c:ad:fd:1a:55:81:79:a0:d2:e5:e6: 97:fb:4b:b9:80:ab:31:4a:71:07:0c:bd:74:57:ca:1a:3f:0b: f6:1e:e4:70:88:0c:17:ca:f8:52:6b:66:5d:cc:ba:8a:76:0c: e6:c6:0f:75:d7:d4:8e:e6:f8:57:67:ee:59:48:72:9f:b6:2c: 5a:3d:3c:e0:66:39:64:dd:e5:5e:48:0d:e2:b9:2d:05:11:02: a1:38:e0:51:d1:41:28:fe:49:00:61:f7:0d:a6:39:d1:f2:5f: 03:ca:77:42:ed:04:80:24:1d:1a:63:e2:bf:a3:43:ab:0e:3b: bf:35:8a:e6:75:ef:da:63:70:f8:48:3f:9b:c2:e4:8d:d0:89: a3:c2:d7:9a:14:97:31:2d:a0:03:94:6f:8b:cf:ca:18:89:85: bc:0e:2d:1b:ec:6b:5b:5f:36:e9:d5:3e:76:c9:5f:85:44:b4: 5a:d8:5b:36:99:10:e4:07:ae:18:ae:ed:ef:fc:c0:62:27:19: 1c:e5:de:45:35:90:01:1f:13:be:a6:8d:9e:d1:06:6c:4a:59: bd:20:b0:b0:2f:2c:41:c1:a7:d2:a6:78:1c:dc:b2:36:7f:c4: 95:3a:1d:a5:af:f2:67:26:65:3d:df:9e:11:af:40:67:85:b7: b5:b6:cb:04 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OJT0bRyGW7lAaeBziMWrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMTAyMTAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjU5OTkzNjYxYTdkZGM0MmRkOTEyNTlhOGU0M2FjN2NjZTU0YjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGao7eXcPOgNQwRvpu66OrxRLJSj xETl90ourjI/pAJKpReSeHOZBSozttMMLb8QvS0o7bQEb1pmC+O2W8jox5K4yf3H Qt8lXu3gBkBXU9UJX7X4U1k8BVPwxmCk3L5zT63f9D9UI2LkzNOf8pw8mgFQT/OW k5IU2wVMm6h3dlIcyZ0nj+AGGDyLNIBob1IML4FTEqvn+NTx1obHQxLGAwyR+q3b zOwfMj4xT0ExTI46Nh1KUxkyMPEGtvlpWp8ASUm0TRDn56LTr/FUkVwxNgfCfce3 6nhbNYStby9Ow+ijpF2+U4myuM25KhSdsuu24hOnlLQHeAj059BXplLsHQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJtZmTZhp93ELdkSWajkOsfM5UsUMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvbTFtWk5tR24zY1F0MlJKWnFPUTZ4OHpsU3hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBU34QAwQA U34WAwQAU344MA0GCSqGSIb3DQEBCwUAA4IBAQA+ScS/wfFDfK39GlWBeaDS5eaX +0u5gKsxSnEHDL10V8oaPwv2HuRwiAwXyvhSa2ZdzLqKdgzmxg9119SO5vhXZ+5Z SHKftixaPTzgZjlk3eVeSA3iuS0FEQKhOOBR0UEo/kkAYfcNpjnR8l8DyndC7QSA JB0aY+K/o0OrDju/NYrmde/aY3D4SD+bwuSN0ImjwteaFJcxLaADlG+Lz8oYiYW8 Di0b7GtbXzbp1T52yV+FRLRa2Fs2mRDkB64Yru3v/MBiJxkc5d5FNZABHxO+po2e 0QZsSlm9ILCwLyxBwafSpngc3LI2f8SVOh2lr/JnJmU9354Rr0Bnhbe1tssE -----END CERTIFICATE-----Generated at Sun Jan 25 21:58:12 2026 by rpki-client